Skip to content

User/kendzisah/1 cs copilot cli compliance 61208029 web content sourcing#5440

Merged
sowenzhang merged 2 commits into
mainfrom
user/kendzisah/1CS-CopilotCLI-Compliance-61208029-WebContentSourcing
Mar 30, 2026
Merged

User/kendzisah/1 cs copilot cli compliance 61208029 web content sourcing#5440
sowenzhang merged 2 commits into
mainfrom
user/kendzisah/1CS-CopilotCLI-Compliance-61208029-WebContentSourcing

Conversation

@kendzisah10
Copy link
Copy Markdown
Contributor

fixes #[issue number]

PR Type

Other... Please describe:
Added Subresource Integrity (SRI) hashes to all third-party CDN-hosted JavaScript and CSS resources in the docs site to comply with the 1CS Continuous SDL external resource
sourcing policy. Self-hosted the Google Fonts Hind font in the blog app, as the policy requires fonts to be served locally or from a Microsoft-operated CDN.

Describe the new behavior?

No new behavior.

PR Checklist

  • Test: run npm run test and ensure that all tests pass
  • Target main branch (or an appropriate release branch if appropriate for a bug fix)
  • Ensure that your contribution follows standard accessibility guidelines. Use tools like https://webhint.io/ to validate your changes.

Additional Information

kendzisah10 and others added 2 commits March 16, 2026 10:24
- Pin docsify to 5.0.0-rc.4 (was ^5.0.0-rc range)
- Pin docsify-themeable to 0.9.0 (was @0 range)
- Pin docsify-copy-code to 3.0.0 (was unpinned)
- Pin docsify-tabs to 1.6.0 (was @1 range)
- All external resources sourced from approved CDNs:
  cdn.jsdelivr.net, js.monitor.azure.com

Addresses SDL requirement: External Web Resources must use
an approved source location.

AB#61208029

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@microsoft-github-policy-service
Copy link
Copy Markdown
Contributor

Thanks @kendzisah10 for opening a Pull Request! The reviewers will test the PR and highlight if there is any conflict or changes required. If the PR is approved we will proceed to merge the pull request 🙌

@sowenzhang sowenzhang merged commit 1358160 into main Mar 30, 2026
6 checks passed
@sowenzhang sowenzhang deleted the user/kendzisah/1CS-CopilotCLI-Compliance-61208029-WebContentSourcing branch March 30, 2026 21:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants